Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/323830343a323934383a3a2f33322d3332203d3e20323634303031.roa
File:                     323830343a323934383a3a2f33322d3332203d3e20323634303031.roa (raw, json)
Hash identifier:          YascKrLb3+yZSdBza+fY17NkDHzvEmoR3xcXI9wVQjE=
Subject key identifier:   34:5B:C3:0E:B4:31:16:16:25:DD:29:43:FA:8B:D3:3C:A7:AF:51:24
Certificate issuer:       /CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
Certificate serial:       3268E5C9A0AEE636DFAAD934A6EBBC20BC74BB84
Authority key identifier: E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/323830343a323934383a3a2f33322d3332203d3e20323634303031.roa
Signing time:             Thu 06 Mar 2025 11:17:52 +0000
ROA not before:           Thu 06 Mar 2025 11:12:52 +0000
ROA not after:            Thu 05 Mar 2026 11:17:52 +0000
asID:                     264001
IP address blocks:        2804:2948::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:68:e5:c9:a0:ae:e6:36:df:aa:d9:34:a6:eb:bc:20:bc:74:bb:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
        Validity
            Not Before: Mar  6 11:12:52 2025 GMT
            Not After : Mar  5 11:17:52 2026 GMT
        Subject: CN=345BC30EB431161625DD2943FA8BD33CA7AF5124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:41:80:3d:45:c5:67:29:13:7a:46:74:fd:ba:
                    da:fa:8f:a4:25:a9:20:e3:59:47:06:15:c7:94:b5:
                    e3:ba:3f:4a:95:31:f4:71:e8:4a:8f:f8:15:ef:eb:
                    4c:d9:ff:94:e2:66:f7:81:b8:04:c4:b4:cc:f7:9e:
                    bb:0a:f0:01:75:96:2f:7c:74:33:84:43:ba:92:b6:
                    e7:97:4a:1f:3c:3d:d9:69:3c:bf:3c:08:36:58:cb:
                    4a:87:54:73:0c:0e:75:ff:1f:e8:5d:42:2b:99:be:
                    a4:67:54:e0:30:6c:58:71:a3:8f:28:de:d6:5d:a9:
                    1f:7b:62:df:d2:9d:93:12:b8:2b:3d:ca:c0:73:f9:
                    17:b1:ae:da:7e:83:e2:d0:93:ef:7c:e8:8d:16:5c:
                    16:4d:07:3d:e8:98:b2:98:4a:4b:62:28:5e:40:a1:
                    01:b0:c4:76:34:1c:5e:91:a2:9d:ad:13:43:e9:7c:
                    83:23:1c:c6:08:2d:50:e4:88:d6:35:51:90:e4:b9:
                    9d:12:a3:06:14:ff:09:45:f3:1c:71:e0:a4:4b:6f:
                    76:e7:d8:98:c2:32:08:de:31:45:2e:c3:31:bc:12:
                    ac:36:37:65:9c:bc:ed:42:83:05:f7:32:38:3f:d2:
                    7e:33:02:6d:5a:2a:c0:1f:a3:b1:ed:c4:f3:34:e1:
                    67:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5B:C3:0E:B4:31:16:16:25:DD:29:43:FA:8B:D3:3C:A7:AF:51:24
            X509v3 Authority Key Identifier:
                keyid:E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/323830343a323934383a3a2f33322d3332203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2948::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:d4:42:6d:92:c4:36:a3:0d:a2:08:7e:a0:a4:a3:ac:05:53:
         81:4f:ce:15:67:07:b0:9e:a0:54:01:f7:20:4a:67:c5:c9:a1:
         07:14:36:52:e4:15:fc:f5:0b:e7:44:6d:e6:bb:e7:98:76:a3:
         04:69:ed:d1:d1:87:52:a6:c2:7b:70:50:3c:99:fe:e0:3e:94:
         cc:7c:e8:87:56:a8:27:18:56:59:55:07:96:ed:54:ba:0f:4a:
         c3:f2:ae:7b:3d:e0:22:63:ac:ae:c7:a8:a6:d3:82:34:10:72:
         c5:04:37:0f:3b:7c:82:ef:a0:d8:e5:3c:b5:d0:6c:78:10:65:
         f8:ae:11:87:68:cb:0e:8f:a7:ec:50:e2:68:49:67:1d:66:b3:
         f7:dd:41:89:80:d1:3b:00:98:71:7b:9a:38:33:36:f3:46:00:
         71:4b:00:81:88:f3:05:f8:13:4b:0e:37:b6:59:c7:af:3c:b0:
         86:8e:41:6b:32:da:23:20:7c:65:76:40:52:11:00:f1:46:40:
         c2:d9:d9:66:8d:54:1a:85:8e:10:bd:3b:d1:ac:f4:a3:e2:4d:
         2a:d2:f0:73:6b:69:15:6c:7e:34:de:6b:4e:8b:0f:59:c5:18:
         e2:ff:02:e9:b3:f7:db:bd:72:c3:1c:3b:f0:dd:d7:83:c7:11:
         b4:e3:93:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:18:42 2025 by rpki-client